content

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent with its stated content-ops purpose, but medium risk because it forwards social-media credentials to repo-specific helper scripts and allows real-world actions such as X posting and Reddit moderation. The documented data flows appear purpose-aligned and use official service endpoints where shown, so this is not confirmed malicious; the main concerns are credential handling through external helper scripts and action automation.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Oct 18, 2026, 01:21 PM
Package URL
pkg:socket/skills-sh/notque%2Fvexjoy-agent%2Fcontent%2F@a5712eb09b6045090a7cfcaf01f03d49a48f95724842d7a88daddde9c6c20b87